
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/CEDA6062150911F1B271807B1E3D8C67.roa
File: CEDA6062150911F1B271807B1E3D8C67.roa (raw, json)
Hash identifier: GaJ7HxRYE0+l3L7iJs19B7gCjn2WV0Am/9oj7fC5tW8=
Subject key identifier: 89:92:73:DC:B3:1A:39:7C:FB:6C:81:1C:8E:24:CE:4F:3F:86:07:18
Certificate issuer: /CN=A91538E7/serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
Certificate serial: 32
Authority key identifier: 57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/CEDA6062150911F1B271807B1E3D8C67.roa
Signing time: Sun 01 Mar 2026 05:57:29 +0000
ROA not before: Sun 01 Mar 2026 00:58:49 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 20001
IP address blocks: 191.1.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl
rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=5768BF4BBD8BBB0DE5C15CFF8F0A9148A0B22ED5
Validity
Not Before: Mar 1 00:58:49 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3d549-6bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:82:2d:7f:f0:4d:85:07:92:ea:f0:ad:95:
d7:29:cd:2d:e5:04:7d:64:49:d5:0d:39:b1:25:33:
32:14:f9:28:b4:8f:e4:ab:18:77:39:8d:94:6d:ef:
a5:bd:8e:02:95:4c:c2:39:2f:07:fc:a6:67:3c:51:
da:5a:13:ca:48:bb:68:7f:32:7e:f0:ec:38:62:49:
0a:da:b6:24:35:26:21:d2:a5:74:2a:62:d2:9d:d8:
73:e5:a9:c2:40:b7:38:b5:91:5b:2e:4b:99:9c:fb:
99:26:a5:76:f2:18:01:8e:df:71:cf:90:bf:24:d8:
f3:99:aa:ad:41:5e:2e:76:ac:6d:b5:81:1a:8c:d5:
90:c3:a4:dd:34:c8:71:0f:8d:ae:4a:7e:e7:5d:2a:
42:5b:8f:a9:9b:01:eb:39:9c:1d:4b:df:16:7c:cd:
e8:fa:12:db:0c:1b:2e:68:c7:42:d5:6b:11:31:34:
e3:21:ab:19:c2:ca:d4:94:e3:46:bc:28:58:6d:6c:
3f:eb:93:bf:99:0f:6e:da:5b:ee:c6:a6:c1:a2:cd:
1a:78:27:7d:20:ae:1e:c4:cf:3c:8c:66:d1:a9:69:
55:0e:97:6d:77:ed:ef:d9:65:9f:b3:69:f7:ad:a8:
f4:83:06:f2:11:9e:3a:3f:9a:ae:cb:11:b6:33:f0:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:92:73:DC:B3:1A:39:7C:FB:6C:81:1C:8E:24:CE:4F:3F:86:07:18
X509v3 Authority Key Identifier:
keyid:57:68:BF:4B:BD:8B:BB:0D:E5:C1:5C:FF:8F:0A:91:48:A0:B2:2E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/V2i_S72Luw3lwVz_jwqRSKCyLtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V2i_S72Luw3lwVz_jwqRSKCyLtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/014C88FAE10611F09CF6CB3496EE528E/CEDA6062150911F1B271807B1E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
191.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:97:6d:be:6a:5c:f7:4d:ad:9f:c6:bd:45:c9:b0:f3:26:96:
04:2e:13:64:60:88:e9:65:75:bf:e1:8c:5c:c9:6e:44:5a:69:
49:d0:0f:9b:98:ca:2a:31:b0:9f:ec:a7:5f:c1:78:9a:bf:3d:
47:6c:ae:d7:7c:56:c6:f0:3a:cd:37:f0:a3:0d:2b:e4:3b:10:
b8:df:e1:0d:14:24:e1:92:6c:e3:cc:6e:1c:73:a4:1b:76:9e:
6c:53:a6:5f:96:00:36:e1:49:4d:11:22:59:21:c8:2c:93:73:
a2:f8:bd:71:22:85:70:bb:c7:bc:97:8d:8e:e5:7a:22:8e:8b:
a7:e9:49:5c:d0:76:32:40:74:18:2a:c4:85:02:7b:35:3e:1c:
66:f3:64:d9:2d:52:ed:eb:14:08:c0:d8:dd:4e:5c:f3:ce:92:
bc:35:ce:4c:4b:d7:b5:9a:6b:f1:b3:bd:82:69:13:f2:06:70:
5a:6b:43:56:67:de:93:ec:ba:86:ab:df:b8:67:dd:51:91:e7:
70:5c:0e:65:21:83:fc:99:db:ed:6d:d3:e5:9f:cc:d4:64:0a:
87:00:2a:3a:b6:a5:5d:5b:3b:a5:8a:44:df:e8:73:e4:3a:4e:
e8:46:53:c9:33:f6:b2:c1:2e:7b:01:57:62:fe:e0:6a:c4:61:
68:32:23:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:34:06 2026 by rpki-client